dlangille
commented
1 year ago I know the cause.
I have a jail which does not contain the file /var/db/pkg/vuln.xml. This jail also does not have pkg installed.
In my use case, I ignore this jail by adding this entry to /etc/periodic.conf: `security_status_pkgaudit_jails_ignore="dev-ingress01.freshports"
I'm not sure why it silently fails. This is the log produced from the script. This is as far as I got today.
+ echo '-j dev-ingress01.freshports'
+ egrep ^-c
+ [ -n '' ]
+ echo '-j dev-ingress01.freshports'
+ egrep ^-j
+ [ -n '-j dev-ingress01.freshports' ]
+ echo '-j dev-ingress01.freshports'
+ awk '$1 ~ /^-[j]/ { print $2 }'
+ jid=dev-ingress01.freshports
+ jexec dev-ingress01.freshports freebsd-version -u
+ jailv=13.2-RELEASE
+ echo 13.2-RELEASE
+ wc -c
+ strlen=' 13'
+ [ 13 -gt 17 -o 13 -lt 11 ]
+ echo 13.2-RELEASE
+ sed 's,^,FreeBSD-,;s,-RELEASE-p,_,;s,-RELEASE$,,'
+ usrlv=FreeBSD-13.2
+ stat -f %m /jails/dev-ingress01/jails/freshports/var/db/pkg/vuln.xml
+ then=''
+ rc=3
+ date +%s
+ now=1687791274
+ [ 3 -ne 0 -o 172800 -le 1687790674 ]
+ anticongestion
+ [ -n '' ]
+ [ -f '' ]
+ f=-F
+ echo '-j dev-ingress01.freshports'
+ egrep '^-[cj]'
+ sysctl -n security.jail.jailed
+ [ -z '-j dev-ingress01.freshports' -a 0 '=' 0 ]
+ /usr/local/sbin/pkg audit -F FreeBSD-13.2
vulnxml file up-to-date
0 problem(s) in 0 installed package(s) found.
+ return 3
+ last_rc=3
+ [ 3 -gt 1 ]
+ rc=3
+ echo
I noticed this started to happen afterthe host was upgraded from FreeBSD 13.1 to FreeBSD 13.2
I have started to debug this, but have not yet found the cause. While I search, I'll create this placeholder issue.